Copyright © 2012 Red Hat, Inc. All rights reserved. Low 2026-09-11T04:03:05 PCRE2: PCRE2: Out-of-bounds read via invalid UTF data during JIT fallback 2.9 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L CWE-125

PCRE2 before 10.48 has a pcre2_match out-of-bounds read after a JIT fallback when an attacker can provide invalid UTF data.

A flaw was found in PCRE2. An attacker can provide invalid UTF (Unicode Transformation Format) data, leading to an out-of-bounds read during a Just-In-Time (JIT) fallback. This vulnerability could potentially result in a denial of service.

An out-of-bounds read can occur in PCRE2 when processing specially crafted invalid UTF data during a JIT fallback. Exploitation requires an application using PCRE2 to process untrusted input with JIT enabled, which may lead to a denial of service or information disclosure. Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Red Hat Hardened Images 2026-09-15T00:00:00Z RHSA-2026:67534 pcre2-main-10.48-0.1.hum1 Red Hat Enterprise Linux 10 Fix deferred bootc Red Hat Enterprise Linux 10 Fix deferred mariadb10.11 Red Hat Enterprise Linux 10 Fix deferred mariadb11.8 Red Hat Enterprise Linux 10 Fix deferred mingw-pcre2 Red Hat Enterprise Linux 10 Affected pcre2 Red Hat Enterprise Linux 7 Fix deferred pcre2 Red Hat Enterprise Linux 8 Fix deferred mariadb:10.11/mariadb Red Hat Enterprise Linux 8 Not affected pcre2 Red Hat Enterprise Linux 9 Fix deferred bootc Red Hat Enterprise Linux 9 Fix deferred mariadb:10.11/mariadb Red Hat Enterprise Linux 9 Fix deferred mariadb:11.8/mariadb Red Hat Enterprise Linux 9 Fix deferred mingw-pcre2 Red Hat Enterprise Linux 9 Affected pcre2 Red Hat Hardened Images Not affected rust Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-8 Red Hat OpenShift Container Platform 4 Fix deferred openshift/ose-rhel-coreos-9 https://www.cve.org/CVERecord?id=CVE-2026-89156 https://nvd.nist.gov/vuln/detail/CVE-2026-89156 https://github.com/PCRE2Project/pcre2/releases/tag/pcre2-10.48 https://github.com/PCRE2Project/pcre2/security/advisories/GHSA-2p8c-ff85-vh9x